$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: psdcOayR4UYAfPOkojmbz941davgcfZ9kOimicImsEg= Subject key identifier: 7F:D3:C5:5E:57:4E:2E:6E:6D:67:EC:66:E6:6B:FC:97:84:6D:3F:24 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 5F1C3985B4500C1FB6850FAAC36BC369E016397E Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa Signing time: Mon 30 Dec 2024 12:01:50 +0000 ROA not before: Mon 30 Dec 2024 11:56:50 +0000 ROA not after: Mon 29 Dec 2025 12:01:50 +0000 asID: 9009 IP address blocks: 157.254.40.0/23 maxlen: 24 157.254.42.0/23 maxlen: 24 157.254.44.0/23 maxlen: 24 157.254.46.0/23 maxlen: 24 157.254.56.0/23 maxlen: 24 157.254.58.0/23 maxlen: 24 157.254.60.0/23 maxlen: 24 157.254.62.0/23 maxlen: 24 157.254.64.0/23 maxlen: 24 157.254.66.0/23 maxlen: 24 157.254.68.0/23 maxlen: 24 157.254.70.0/23 maxlen: 24 157.254.72.0/23 maxlen: 24 157.254.74.0/23 maxlen: 24 157.254.76.0/23 maxlen: 24 157.254.78.0/23 maxlen: 24 157.254.80.0/23 maxlen: 24 157.254.86.0/23 maxlen: 24 157.254.88.0/23 maxlen: 24 157.254.96.0/23 maxlen: 24 157.254.98.0/23 maxlen: 24 157.254.100.0/23 maxlen: 24 157.254.102.0/23 maxlen: 24 157.254.104.0/23 maxlen: 24 157.254.106.0/23 maxlen: 24 157.254.108.0/23 maxlen: 24 157.254.110.0/23 maxlen: 24 157.254.112.0/23 maxlen: 24 157.254.114.0/23 maxlen: 24 157.254.116.0/23 maxlen: 24 157.254.118.0/23 maxlen: 24 157.254.120.0/23 maxlen: 24 157.254.122.0/23 maxlen: 24 157.254.124.0/23 maxlen: 24 157.254.126.0/23 maxlen: 24 157.254.136.0/22 maxlen: 24 157.254.144.0/23 maxlen: 24 157.254.146.0/23 maxlen: 24 157.254.148.0/23 maxlen: 24 157.254.150.0/23 maxlen: 24 157.254.240.0/23 maxlen: 24 157.254.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1c:39:85:b4:50:0c:1f:b6:85:0f:aa:c3:6b:c3:69:e0:16:39:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 30 11:56:50 2024 GMT Not After : Dec 29 12:01:50 2025 GMT Subject: CN=7FD3C55E574E2E6E6D67EC66E66BFC97846D3F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:45:9a:1e:d8:fc:96:e8:8e:fd:51:0e:0d: 6e:f1:7c:ad:05:b8:03:10:7d:e5:69:09:0a:76:de: 26:6b:b7:98:5e:8c:a0:8c:75:32:2d:c9:88:13:be: 3d:c8:36:af:57:23:71:8e:c7:4e:79:67:86:04:29: a6:38:dd:81:f8:e8:98:a1:ec:5b:61:52:f6:30:5b: ef:72:18:2b:4a:8b:31:84:6d:82:e0:21:32:46:1e: ea:e7:d9:cf:a9:38:cd:3b:8a:c6:4c:8f:18:40:bb: ab:7e:d7:5c:c9:05:07:fb:86:4e:fe:09:9f:e8:04: d8:c6:be:a7:f6:c1:b6:78:2b:1c:00:ce:6a:4b:7d: 47:97:06:bf:e3:b0:23:be:c1:c5:f5:dc:bd:e7:8d: bb:a7:96:61:08:78:d6:8c:7a:3e:07:dc:ea:39:4a: 57:e6:83:69:fe:34:97:ba:dd:1d:d2:d1:90:f1:64: ab:e7:e5:db:c5:c5:c9:9c:15:b2:f4:50:6e:50:6b: a7:a0:4c:76:d9:3a:38:8f:0e:d2:65:0b:bc:8e:f0: 71:db:5b:07:6d:75:c7:75:cc:4d:ea:89:73:ce:39: e5:3e:ae:7e:44:84:a1:2b:fc:92:d9:12:77:91:e5: d6:d4:cf:8d:98:53:6e:ac:06:f1:05:be:62:0d:8c: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D3:C5:5E:57:4E:2E:6E:6D:67:EC:66:E6:6B:FC:97:84:6D:3F:24 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.40.0/21 157.254.56.0-157.254.81.255 157.254.86.0-157.254.89.255 157.254.96.0/19 157.254.136.0/22 157.254.144.0/21 157.254.240.0/22 Signature Algorithm: sha256WithRSAEncryption 46:0d:90:c4:be:65:80:ab:ad:de:8c:de:62:62:79:eb:7d:0b: 96:cc:a6:cb:fe:f3:20:db:7e:90:b9:67:37:3e:59:c6:07:4f: b4:cb:33:fc:bf:cf:dd:09:26:96:02:d7:e7:0c:07:89:15:25: 7c:c0:a6:59:c1:43:39:09:c7:2c:a5:e9:ba:27:53:f2:7e:bd: 9b:90:db:86:31:de:8d:ca:17:93:b8:8b:28:8e:3e:b0:ea:92: 18:84:ad:48:ed:50:41:62:15:af:4d:c8:29:ef:51:01:82:ff: 1b:da:05:94:a6:98:3d:ef:10:08:a4:f0:a2:4d:15:bd:94:b6: 4a:dc:46:ad:09:85:83:08:78:8a:c4:ef:b8:f1:d1:39:d0:63: 49:31:07:eb:28:b3:7e:08:7a:7f:46:c0:41:cd:15:3d:2d:0f: bd:e5:8a:8e:38:ea:28:ac:9e:be:da:51:4c:ce:e0:47:5b:c7: b8:a2:20:a3:3f:75:be:0c:6c:a6:0e:5d:84:03:89:1e:e3:7d: c0:f9:03:0e:e4:29:56:d7:57:17:87:99:01:28:c6:33:00:6f: da:5e:c1:34:89:8f:95:e5:90:70:37:df:fe:f7:58:b3:c7:84: bb:17:37:5e:ef:ac:88:01:20:93:f5:4e:5a:4e:62:48:77:c4: c0:57:4b:16 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgIUXxw5hbRQDB+2hQ+qw2vDaeAWOX4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQxMjMwMTE1NjUwWhcNMjUxMjI5MTIwMTUw WjAzMTEwLwYDVQQDEyg3RkQzQzU1RTU3NEUyRTZFNkQ2N0VDNjZFNjZCRkM5Nzg0 NkQzRjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFBFmh7Y/Jbo jv1RDg1u8XytBbgDEH3laQkKdt4ma7eYXoygjHUyLcmIE749yDavVyNxjsdOeWeG BCmmON2B+OiYoexbYVL2MFvvchgrSosxhG2C4CEyRh7q59nPqTjNO4rGTI8YQLur ftdcyQUH+4ZO/gmf6ATYxr6n9sG2eCscAM5qS31Hlwa/47AjvsHF9dy95427p5Zh CHjWjHo+B9zqOUpX5oNp/jSXut0d0tGQ8WSr5+XbxcXJnBWy9FBuUGunoEx22To4 jw7SZQu8jvBx21sHbXXHdcxN6olzzjnlPq5+RIShK/yS2RJ3keXW1M+NmFNurAbx Bb5iDYwLOwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFH/TxV5XTi5ubWfsZuZr/JeE bT8kMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYI KwYBBQUHAQcBAf8ERDBCMEAEAgABMDoDBAOd/igwDAMEA53+OAMEAZ3+UDAMAwQB nf5WAwQBnf5YAwQFnf5gAwQCnf6IAwQDnf6QAwQCnf7wMA0GCSqGSIb3DQEBCwUA A4IBAQBGDZDEvmWAq63ejN5iYnnrfQuWzKbL/vMg236QuWc3PlnGB0+0yzP8v8/d CSaWAtfnDAeJFSV8wKZZwUM5Cccspem6J1Pyfr2bkNuGMd6NyheTuIsojj6w6pIY hK1I7VBBYhWvTcgp71EBgv8b2gWUppg97xAIpPCiTRW9lLZK3EatCYWDCHiKxO+4 8dE50GNJMQfrKLN+CHp/RsBBzRU9LQ+95YqOOOoorJ6+2lFMzuBHW8e4oiCjP3W+ DGymDl2EA4ke433A+QMO5ClW11cXh5kBKMYzAG/aXsE0iY+V5ZBwN9/+91izx4S7 Fzde76yIASCT9U5aTmJId8TAV0sW -----END CERTIFICATE-----Generated at Sat Apr 26 18:31:30 2025 by rpki-client